Merge pull request #4739 from FinnStutzenstein/fixChangeOwnPasswortViewPermissions

Fix permissions for the change-own-password-view
This commit is contained in:
Emanuel Schütze 2019-05-24 15:31:17 +02:00 committed by GitHub
commit 309b8118f6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 5 deletions

View File

@ -45,8 +45,9 @@ const routes: Routes = [
},
{
path: 'users',
loadChildren: './users/users.module#UsersModule',
data: { basePerm: 'users.can_see_name' }
loadChildren: './users/users.module#UsersModule'
// No baseperm, because change own password is ok, even if the
// user does not have users.can_see_name
},
{
path: 'tags',

View File

@ -12,7 +12,8 @@ const routes: Routes = [
{
path: '',
component: UserListComponent,
pathMatch: 'full'
pathMatch: 'full',
data: { basePerm: 'users.can_see_name' }
},
{
path: 'password',
@ -47,8 +48,9 @@ const routes: Routes = [
},
{
path: ':id',
component: UserDetailComponent,
data: { basePerm: 'users.can_see_name' }
component: UserDetailComponent
// No basePerm, because user is allowed to see the own profile page.
// Other user detail pages are empty if user does not have user.can_see_name.
}
];